$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft File: TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft (raw, json) Hash identifier: rvJJEniCW20MHFlBWhReE4efBNcWWRiK8WA86RZ3lNk= Subject key identifier: 1F:E6:19:53:C3:14:9E:C5:31:2F:6F:F0:24:68:CA:12:22:5E:27:A8 Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Certificate serial: 045A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft Manifest number: 0456 Signing time: Thu 03 Jul 2025 00:32:57 +0000 Manifest this update: Thu 03 Jul 2025 00:32:56 +0000 Manifest next update: Thu 10 Jul 2025 00:32:56 +0000 Files and hashes: 1: TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl (hash: YCjkdqaDaKmq0rJFATpd1QeBnPFIVVNLaw6Z6oUmE3M=) 2: E1484B3658BD11ECB49A9856C4F9AE02.roa (hash: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1114 (0x45a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2B, serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62 Validity Not Before: Jul 3 00:32:56 2025 GMT Not After : Jul 10 00:32:56 2025 GMT Subject: CN=6865cfb9-aa01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4c:97:fe:bb:13:a2:df:64:92:be:3a:11:cc: 9e:f3:95:95:5c:c9:c8:d9:5f:4a:61:eb:76:74:fd: 47:af:e0:66:0e:a1:62:fc:88:57:f7:b3:8a:da:54: d2:3c:c4:15:bb:9c:0e:dc:ee:80:1f:db:12:6d:12: 9e:e4:90:95:31:8e:0e:23:a9:6c:4a:9f:74:65:c1: 54:92:e4:cb:e3:1a:dd:59:90:7f:26:96:be:76:aa: 92:82:ec:56:52:ff:9b:79:aa:96:0a:f3:67:b8:29: 1d:22:ed:e4:db:1a:5d:a8:de:47:f7:47:79:b7:6b: 9e:d4:8e:94:0d:66:4b:53:73:aa:d1:82:5c:fe:59: 89:f9:f2:09:80:9c:87:cb:fa:cf:1b:d8:ad:f1:df: 39:c5:b4:77:85:0d:4c:82:63:c0:1a:68:f6:86:85: 3f:5f:10:4a:b7:86:5e:f4:87:86:40:a8:aa:db:7e: 9a:ea:f6:62:66:9f:30:dd:2a:36:58:bd:1a:a6:fd: 65:f7:4b:2e:a5:43:0e:d2:83:a9:b6:d7:21:51:8a: 17:9b:5c:c9:ea:0a:e7:9b:5d:51:62:be:5f:98:f2: 13:d9:73:65:c7:58:0b:2d:65:e0:20:31:6e:9b:64: 18:76:0b:35:f5:2d:2a:5b:01:87:38:68:2e:f9:56: e3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E6:19:53:C3:14:9E:C5:31:2F:6F:F0:24:68:CA:12:22:5E:27:A8 X509v3 Authority Key Identifier: keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:fe:a2:a0:8e:ee:b2:4a:f8:c1:7e:29:f6:26:44:25:a5:0f: 3a:e2:3e:7d:89:26:2a:c0:3e:86:7e:35:ed:e2:83:3f:5b:ba: 15:37:08:45:64:43:ea:95:f1:d8:33:ae:2d:cb:e0:04:60:16: 97:26:b6:7b:79:46:0f:11:0e:22:19:bb:4c:d0:36:c8:8e:78: 56:b6:eb:1b:aa:ab:d9:a6:03:ca:9a:98:89:44:23:c3:ff:c6: 6b:1c:95:73:31:ad:15:b0:35:20:92:0f:4a:9b:86:e1:9f:d9: 04:a3:09:49:d7:ba:7a:e7:fb:4a:ae:c6:7f:4a:70:7d:68:78: 0f:b7:05:c3:b8:e1:37:e5:9e:f7:9c:1c:54:b8:a5:5a:cd:9f: 35:0b:d8:5d:fb:3e:63:aa:d5:36:71:eb:d9:bc:40:d8:4f:25: b4:fe:be:47:57:6e:dd:9a:8d:54:00:88:1f:5c:5b:e2:ad:15: 9c:2a:39:2b:bf:ec:3e:ef:3e:a7:34:2b:77:38:c8:f1:ad:74: 7d:9a:79:9f:c9:21:3c:ee:86:fe:cd:19:cc:95:4a:12:bb:44: d8:6c:9e:0f:36:dc:dd:7e:f4:38:a7:d4:d8:29:0d:33:e3:26: 7c:ef:4b:56:99:ef:ae:2d:f5:97:4e:ad:46:b2:69:11:5e:e3: a0:32:6b:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkIxMTAvBgNVBAUTKDREOUQwRjY4QzJEM0ZGMjg0NjA1ODE5MENCRjZDOEM5 MjFDRERBNjIwHhcNMjUwNzAzMDAzMjU2WhcNMjUwNzEwMDAzMjU2WjAYMRYwFAYD VQQDEw02ODY1Y2ZiOS1hYTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskyX/rsTot9kkr46Ecye85WVXMnI2V9KYet2dP1Hr+BmDqFi/IhX97OK2lTS PMQVu5wO3O6AH9sSbRKe5JCVMY4OI6lsSp90ZcFUkuTL4xrdWZB/Jpa+dqqSguxW Uv+beaqWCvNnuCkdIu3k2xpdqN5H90d5t2ue1I6UDWZLU3Oq0YJc/lmJ+fIJgJyH y/rPG9it8d85xbR3hQ1MgmPAGmj2hoU/XxBKt4Ze9IeGQKiq236a6vZiZp8w3So2 WL0apv1l90supUMO0oOpttchUYoXm1zJ6grnm11RYr5fmPIT2XNlx1gLLWXgIDFu m2QYdgs19S0qWwGHOGgu+VbjXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB/mGVPD FJ7FMS9v8CRoyhIiXieoMB8GA1UdIwQYMBaAFE2dD2jC0/8oRgWBkMv2yMkhzdpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyQi8wQjI2QkFDQzU4 QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95aEdCWUdReV9iSXlTSE4y bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RaMFBhTUxUX3loR0JZR1F5X2JJeVNITjJtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REQyQi8wQjI2QkFDQzU4QkExMUVDQTFEOTFBNTFDNEY5QUUwMi9UWjBQYU1MVF95 aEdCWUdReV9iSXlTSE4ybUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCU/qKgju6ySvjBfin2JkQlpQ864j59iSYqwD6GfjXt4oM/W7oVNwhF ZEPqlfHYM64ty+AEYBaXJrZ7eUYPEQ4iGbtM0DbIjnhWtusbqqvZpgPKmpiJRCPD /8ZrHJVzMa0VsDUgkg9Km4bhn9kEowlJ17p65/tKrsZ/SnB9aHgPtwXDuOE35Z73 nBxUuKVazZ81C9hd+z5jqtU2cevZvEDYTyW0/r5HV27dmo1UAIgfXFvirRWcKjkr v+w+7z6nNCt3OMjxrXR9mnmfySE87ob+zRnMlUoSu0TYbJ4PNtzdfvQ4p9TYKQ0z 4yZ870tWme+uLfWXTq1GsmkRXuOgMmsQ -----END CERTIFICATE-----Generated at Fri Jul 4 08:07:23 2025 by rpki-client